b602d6abc1db73a4b9172fc18b76d13d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b602d6abc1db73a4b9172fc18b76d13d
Size

26KB
MD5

b602d6abc1db73a4b9172fc18b76d13d
SHA1

57a1a39f601059dbbe9faac4698fb5e19fb2b034
SHA256

04c482590a286400ac8ca1c13224d7e3d2cff34c1c4becec6ab6c0eac3ddceb2
SHA512

3ed433f68606b12835f0f909c02762501c5a75dd0e08e5de0b5060ba332c6da5b89b1d6f75189725f34c4aca1cedff2d0b533a45d474a9a4a57e35b66706955f
SSDEEP

384:jT2ZLNkEkHLn+o365mYkE0Uhm0YYo3j18CaMUIrywSFE1q/Dlam0i/uq+6H3j843:1rOmY+8Y/3jmCalIT3U/DlLHT+a8y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b602d6abc1db73a4b9172fc18b76d13d

Files

b602d6abc1db73a4b9172fc18b76d13d
.exe windows:1 windows x86 arch:x86

e7ff72bcdfa5e9578ef425e354556675

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

GdiStartDocEMF
GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

RealShellExecuteExW
StrChrW
Control_RunDLLW
SHEmptyRecycleBinA
SHFileOperation
SHFileOperation
SHGetDesktopFolder

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE